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REMARKS/ARGUMENTS 

Claim Amendments 

The Applicant has amended claims 1, 5, 14-17, 22-23, 25, 29, and 33-35, 
Applicant respectfully submits no new matter has been added. Accordingly, claims 1 - 
2,5, 7-9, 11-17, 20-25, and 29-35 are pending in the application. Favorable 
reconsideration of the application is respectfully requested in view of the foregoing 
amendments and the following remarks. 

Examiner Objections - Claims 

Claims 1, 5, 14, 15, 17, 22, 23, and 29 are objected to because of the following 
informalities. Again, the Applicant appreciates the Examiner's thorough review of the 
claims. The Applicant has amended, the claims as suggested by the Examiner in order 
to correct the informalities. The Examiners consideration of the amended claims is 
respectfully requested. 

Claim Rejections - 35 U.S.C. § 103 (a) 

Claims 1 , 2, 5, 7-9, 11 , 12, 20, 23, 24, 30, 31, and 33-35 stand rejected under 35 
U.S.C. § 103(a) as being unpatentable over Steele (US Patent 7,016,877) in view of 
Yasala (US Patent Application Publication 2003/0188156). The Applicant has amended 
the claims to more clearly distinguish the Applicant's claimed invention. In particular 
"personal profile data protection server" has been amended to read "protection server". 
The Applicant respectfully traverses the rejection of these claims. 

The Applicant's claimed invention provides an intermediary proxy server 
(preferably located within the user's personal environment or at the operator premises) 
and a protection server for protecting user profile data. The intermediary proxy server 
requests a certificate and signed content from the protection server over a secure 
connection. The intermediary proxy server verifies that the certificate; belongs to the: 
protection server by comparing the certificate of the protection server with a published 
certificate. The protection server includes an API to allow interactions with a service 
provider and a storing means for storing specific data and end user personal profile 
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data. The service provider can then, through the API, request personal profile data 
wherein the personal profile data is delivered according to the end user privacy level. 

The Detailed Action cites the Steele reference for disclosing protection of end 
user personal profile data using an intermediary proxy server and a personal profile 
data protection server. The Applicant has reviewed the referenced portions of Steele 
and, respectfully, the Applicant disagrees; with the interpretation of those portions. The 
Detailed Action states that the intermediary proxy of the Applicant's disclosure 
corresponds to client side application 105 of the Steele reference. The client side 
application is an "...application specific to [a] browser session only and not to the client 
device 104." Also, the client side application "... may be removed from the client device 
104 after its execution is complete" (column 7, lines 55-60). There are other references 
in the patent alluding to the temporary nature of the client device in the Steele 
reference. 

As disclosed by the Applicant the intermediary proxy server is described as 
supporting different protocols (page 6, lines 1-8). Also, the Steele references 1 "client 
side application" is specific to a browser session, is used to populate fields that the 
consumer may verify - not the client side application. As noted above the intermediary 
proxy server verifies that a certificate belongs to the protection server by comparing the 
certificate of the protection server with a published certificate. The Steele, reference des 
not teach or suggest that the client side application can perform this action. Nor is 
Steele capable of requesting a certificate and signed content from a protection server 
over a secure connection. 

The protection server is described as corresponding to host server 108. Host 
server 108 includes DBMS 109. DBMS 109 is used for authentication. The host server 
is in contrast to the Applicant's protection server which provides certificates of protection 
in order for the intermediary server to perform the authentication task. Furthermore, the 
host server of Steele lacks an API for communicating with a service provider. Also, the 
host server does not deliver personal profile data to a requesting service provider 
according to user preferences or in such a way that there is no association between the 
personal profile data and the user. 
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The Yasala reference is cited for disclosing personal profile data protection 
server having a protection certificate. The Applicant has reviewed the cited portion of 
the Yasala reference and respectfully disagrees with the interpretation. The cited portion 
(para 27-31) merely describes establishing an SSL Handshake between two peers. The 
certificate is used to transfer data between a first peer and second peer securely. 
However, the Yasala reference does not disclose specifically protecting user profile 
data. 

The Applicant respectfully asserts that the Steele reference and the Yasala 
reference, whether individually or in combination, do not include the above noted 
limitations. This being the case, independent claims 1 and 23, which are analogous and 
include similar limitations, are patentable over Steele and Yasala. The respective 
dependent claims are also patentable over Steele and Yasala. The Applicant 
respectfully requests the rejection of claims 1-2, 5, 7-9, 1-12, 20, 23-24, 30-31, and 33- 
35 be withdrawn. 

Claims 2, 7, 11, 14, 21, 22, 29, 32, 34, and 35 stand rejected under 35 U.S.C. § 
103(a) as being unpatentable over Steele in view of Yasala, further in view of Gabber 
(U.S. Patent 5,961,593). The Applicant respectfully traverses the rejection of these 
claims. 

The Gabber reference is cited for disclosing the first communication protocol is a 
secure protocol - outside the user's computer. Gabber is also cited for further limitations 
as claimed by the rejected claims. However, a combination of Steele, Yasala and 
Gabber does not provide limitations lacking from the combination of Steele and Yasala 
including the protection server and the AP! for communicating with a service provider. 

Claims 2, 7, 11, 14, 21, 22, 29, 32, 34, and 35 depend from the respective 
independent claims and recite further limitations in combination with the novel elements 
of claims 1 and 23. Therefore, the allowance of claims 2, 7, 11, 14, 21, 22, 29, 32 ? 34, 
and 35 is respectfully requested. 
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Claims 13, 15-17, and 25 stand rejected under 35 U.S.C. § 103(a) as being 
unpatentable over Steele, in view of Yasala, and further in view of P3P ("P3P 1.0: A 
new Standard in Online Piracy", 9/13/2000, pp. 1% The Applicant respectfully 
traverses the rejection of these claims. 

The P3P reference is cited for disclosing storing user preferences in an end user 
station, separate fast access storing means, the arrangement of claim 16 and the 
incorporation of a P3P agreement in the Applicant's claimed agreement. The Applicant 
has reviewed the P3P reference and respectfully submits that the reference does not 
disclose the recited limitations and upon reviewing the underlying P3P technical report 
the Applicant respectfully submits that P3P actually teaches away from the Applicant's 
invention. For instance, there is no reference to storing user preferences in the end user 
station in either the cited P3P reference or the underlying document. As the underlying 
technical report notes "Information is not retained for more than a brief period of time 
necessary to make use of it during the course of a single online interaction. Information 
MUST be destroyed following this interaction and MUST NOT be logged, archived, or 
otherwise stored." (paragraph 3.3.6). This being the case, the Applicant respectfully 
requests withdrawal of the rejection of claims 13, 15-17 and 25. 
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CONCLUSION 

in view of the foregoing remarks, the Applicant believes all of the claims currently 
pending in the Application to be in a condition for allowance. The Applicant therefore, 
respectfully requests, that the Examiner withdraw all rejections and issue a Notice of 
Allowance for all pending claims. 

The Applicant requests a telephonic interview if the Examiner has any questions 
or requires any additional information that would further or expedite the prosecution of 
the Application. 



Date: September 12, 2007 
Ericsson Inc. 

6300 Legacy Drive, M/S EVR 1-C-11 
Piano, Texas 75024 

(972) 583-8656 

sidney.weatherford@ericsson.com 



Respectfully submitted, 
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